IBM Cloud Docs
Securing your data

Securing your data

To ensure that you can securely manage your data when you use IBM Cloud Metrics Routing, it is important to know exactly what data is stored and encrypted, and how you can delete any stored data.

What data is stored in IBM Cloud Metrics Routing

IBM Cloud Metrics Routing stores configuration data only.

  • Stores target definitions in the region where the target is defined, and in the primary and backup metadata locations that you configure in the account. For more information, see targets.
  • Stores route definitions in the primary and backup metadata locations that you configure in the account. For more information, see routes.
  • Stores account settings in the primary and backup metadata locations that you configure in the account. For more information, see settings.

How your data is stored and encrypted

Configuration data

You can configure IBM Cloud Metrics Routing resources by using public and private endpoints.

To ensure that you have enhanced control and security over your data, your account must be virtual routing and forwarding (VRF) enabled and you must use private routes to IBM Cloud® service endpoints. You must configure IBM Cloud Metrics Routing resources over a private network connection.

IBM Cloud Metrics Routing stores the configuration of settings, targets and routes for your account.

  • Connections use TLS/SSL encryption for data in transit. The current supported version of this encryption is TLS 1.2.
  • The storage where the configuration is stored is encrypted with LUKS using AES-256.

Metrics data

You can define 1 or more routing rules that define how metrics are routed in the account.

  • Metrics data from an IBM Cloud service to your target service in IBM Cloud is secured via private connection. The connection supports TLS 1.2.
  • You must define a service to service authorization to enable the IBM Cloud Metrics Routing service to send data to a IBM Cloud Monitoring instance.

You can store metrics data to an IBM Cloud Monitoring instance. You manage the instance and the data that is collected in the instance. For more information, see Data security.

Deleting your data

Configuration data

IBM Cloud Metrics Routing stores configuration data only.

You can delete any route, and target by using the API, the CLI or terraform scripts.

To stop IBM Cloud Metrics Routing from routing data to the configured targets, complete the following steps:

  1. Delete all the routes in the account . For more information, see Deleting a route.
  2. Remove any default targets.

To delete a target, you must delete the target definition. Check that the target is not configured in a route. If it is, update the route to remove it.

To delete completely all the configuration data of the account, complete the following steps:

  1. Delete all the routes in the account. For more information, see Deleting a route.
  2. Delete all the targets in the account. For more information, see Deleting a target using the CLI.
  3. Remove any default targets.
  4. Open an IBM support ticket to request deletion of all your service metadata. For information about opening an IBM support ticket, or about support levels and ticket severities, see Creating support cases.

Metrics data

To delete metrics data, check the target type instructions.